Differs from policy - Data Control policy

Article ID:
117406

Rating:

1 customers rated this article 6.0 out of 6

Updated:
12 Jun 2012

Issue

Endpoints which are upgrading to Sophos Anti-Virus 10.0.4 and have an existing Data Control policy applied which contains a file content rule, will see the Policy compliance column within the Sophos Enterprise Console change to Differs from policy.

First seen in

Sophos Anti-Virus for Windows 2000+ 10.0.4

Cause

With the new release of Sophos Anti-Virus 10.0.4 there have been improvements to the Content Control Lists. The endpoints will not receive new Content Control List until they receive the new policy. The endpoints will report to the console that they have the older list which results in the policy state of "Differs from policy".

Technical Information

The new Content Control Lists can more accurately detect certain personal identity data such as credit card numbers.

For more information on Content Control Lists, please see article 51976.

What To Do

Within the Enterprise Console:

Select the computer(s) which show the policy compliance as "Differs from policy" for the data control policy.

Right click and select "Comply with" from the list and then choose "Group Data Control Policy".

The endpoints will then have the new configuration of the Content Control List applied.